PRIVACY NOTICE PURSUANT TO ARTICLES 13-14 OF REGULATION (EU) 2016/679

This document (“Notice”), issued pursuant to Regulation (EU) 2016/679 (hereinafter “GDPR”) and the current legislation on personal data protection, is intended to inform visitors (“Data Subjects”) of this website (“Website”) about the purposes and methods of processing personal data (“Personal Data”) collected through the various features and services available on the Website.

​

👤 Data Controller
Kimera Automobili S.r.l., with registered office at Via Basse di Chiusano no. 10, Cuneo, Tax Code 03889470047, is the Data Controller.
Kimera Automobili S.r.l. can be contacted at the following email address: info@kimera-automobili.com

🎯 Purpose and Legal Basis of the Processing
Personal Data are processed for the following purposes:
• Browsing the website: collection of browsing data (e.g., IP address) to ensure the proper functioning of the website. Legal basis: legitimate interest of the Data Controller (Art. 6(1)(f) GDPR).
• Handling of requests through the “Contacts” section: the processing of Personal Data is necessary to respond to inquiries and manage them appropriately. Legal bases: consent of the Data Subject (Art. 6(1)(a) GDPR) or the execution of pre-contractual measures (Art. 6(1)(b) GDPR).
• Sending of promotional communications (newsletter): processing of data to send informational and promotional messages, subject to the prior consent of the Data Subjects. Legal basis: consent of the Data Subject (Art. 6(1)(a) GDPR).
• Protection of rights and legal obligations: Personal Data may be processed, where necessary, to allow the Data Controller to establish, exercise, or defend a legal claim, or to comply with legal obligations or requests from competent authorities. The legal bases are, respectively, compliance with a legal obligation to which the Data Controller is subject, pursuant to Art. 6(1)(c), and, where applicable, legitimate interest pursuant to Art. 6(1)(f) GDPR.

📁 Types of Personal Data Processed
The following types of Personal Data are processed:

• Browsing data: IP address, connection and browsing data.

• Identification and contact data: first name, last name, email address, phone number (only if provided in the "Contacts" section), and any other information shared by the Data Subjects at the time of submitting the request.

👥 Categories of Data Subjects
Processing activities apply to the following categories of individuals:

• Website visitors, including Data Subjects who use the “Contacts” section to fill out the form in order to request information or communicate with the Data Controller.

• Newsletter subscribers: Data Subjects who provide their name, surname, and email address to receive updates and promotional messages from the Data Controller.

⚙️ Processing Methods and Data Retention Period
Data will be processed using both paper and electronic means, with the adoption of appropriate technical and organizational security measures to ensure data protection and prevent unauthorized access.
The processing will be carried out in compliance with applicable laws. Personal Data will be stored only for as long as necessary to achieve the purposes for which they were collected and, in any case, in compliance with legal obligations and, where applicable, no longer than the duration of the Website navigation, the withdrawal of consent by the Data Subject, and/or the completion of the request submitted by the Data Subject.

🗣️ Recipients of the Processing
Personal Data may be shared with the following categories of recipients:
a) personnel of the Data Controller, duly authorized and trained, including on security measures and confidentiality obligations;
b) external consultants engaged by the Data Controller to provide services offered through the Website;
c) IT service providers (e.g., hosting services) used by the Data Controller in various capacities and duly appointed as data processors;
d) competent authorities or other entities as required by law.

🌍 Transfer of Personal Data Outside the EU
Personal Data will not be transferred to third countries or international organizations.

📝 Rights of the Data Subject
With regard to the processing described in this Notice, the Data Subject may exercise the rights set out in Articles 15 to 22 of the GDPR, in particular:
• Right of access (Art. 15 GDPR): the right to obtain confirmation as to whether or not Personal Data concerning them are being processed and, if so, to access such Personal Data.
• Right to rectification (Art. 16 GDPR): the right to obtain without undue delay the rectification of inaccurate Personal Data and/or the completion of incomplete data.
• Right to erasure (right to be forgotten) (Art. 17 GDPR): the right to obtain the deletion of Personal Data concerning them, unless processing is necessary to comply with a legal obligation.
• Right to restriction of processing (Art. 18 GDPR): the right to obtain restriction of processing in the event of inaccuracy or other legitimate reasons.
• Right to data portability (Art. 20 GDPR): the right to receive Personal Data in a structured, commonly used, and machine-readable format.
• Right to object (Art. 21 GDPR): the right to object at any time to the processing of Personal Data on legitimate grounds.
• Right not to be subject to automated decision-making, including profiling (Art. 22 GDPR).
• Right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

To exercise these rights, the Data Subject may contact the Data Controller at the following email address: media@kimera-automobili.com